The vulnerability allows an attacker to expose data stored in the browser's cache component. The flaw could reveal cached URLs, headers, or other sensitive content that was stored by the browser during normal operation. Such exposure could compromise user privacy and lead to leakage of confidential information. The weakness is a violation of input handling and data confidentiality safeguards, identified as a type of information disclosure.

Mozilla Firefox versions preceding 158 are affected. The vulnerability was addressed in Firefox build 158 and all subsequent releases. Users of older Firefox releases should verify their version against the Mozilla security advisory to confirm response.

The EPSS score is not available and this issue is not listed in the CISA KEV catalog, indicating that no large‑scale exploit data has been reported. The likely attack vector is local, requiring either physical access to the machine or the ability to run code with user privileges to read cache data. No specific exploitation conditions are documented, but the impact remains significant for confidentiality of the data cached by Firefox.